CVE-2023-52426

Medium

libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.

mitre·CWE-776·Published 2024-02-04

CVSS

5.5

EPSS

0.00

KEV

Exploits

cve.orgen

101 chars

libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.

NVDen

101 chars

libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.

NVDes

129 chars

libexpat hasta 2.5.0 permite la expansión recursiva de entidades XML si XML_DTD no está definido en el momento de la compilación.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	5.5	—	—	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
3.1	Primary	cve.org	5.5	—	—	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H